CVE-2008-6373: Code Injection
Published Mar 2, 2009
·Updated
Unspecified vulnerability in Nagios before 3.0.6 has unspecified impact and remote attack vectors related to CGI programs, "adaptive external commands," and "writing newlines and submitting service comments."
Affected Software
55 affected components
Nagios nagios<=3.0.5
Nagios nagios=1.0
Nagios nagios=1.0_b1
Nagios nagios=1.0_b2
Nagios nagios=1.0_b3
Nagios nagios=1.0b1
Nagios nagios=1.0b2
Nagios nagios=1.0b3
Nagios nagios=1.0b4
Nagios nagios=1.0b5
Nagios nagios=1.0b6
Nagios nagios=1.1
Nagios nagios=1.2
Nagios nagios=1.3
Nagios nagios=1.4
Nagios nagios=1.4.1
Nagios nagios=2.0
Nagios nagios=2.0b1
Nagios nagios=2.0b2
Nagios nagios=2.0b3
Nagios nagios=2.0b4
Nagios nagios=2.0b5
Nagios nagios=2.0b6
Nagios nagios=2.0rc1
Nagios nagios=2.0rc2
Nagios nagios=2.1
Nagios nagios=2.2
Nagios nagios=2.3
Nagios nagios=2.3.1
Nagios nagios=2.4
Nagios nagios=2.5
Nagios nagios=2.7
Nagios nagios=2.8
Nagios nagios=2.9
Nagios nagios=2.10
Nagios nagios=2.11
Nagios nagios=3.0
Nagios nagios=3.0-alpha1
Nagios nagios=3.0-alpha2
Nagios nagios=3.0-alpha3
Nagios nagios=3.0-alpha4
Nagios nagios=3.0-beta1
Nagios nagios=3.0-beta2
Nagios nagios=3.0-beta3
Nagios nagios=3.0-beta4
Nagios nagios=3.0-beta5
Nagios nagios=3.0-beta6
Nagios nagios=3.0-beta7
Nagios nagios=3.0-rc1
Nagios nagios=3.0-rc2
Nagios nagios=3.0-rc3
Nagios nagios=3.0.1
Nagios nagios=3.0.2
Nagios nagios=3.0.3
Nagios nagios=3.0.4
Remediation
Patch Available
Patch Available
Event History
Mar 2, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6373?
The severity of CVE-2008-6373 is generally considered moderate due to uncertainty around its impacts.
2
How do I fix CVE-2008-6373?
To fix CVE-2008-6373, you should upgrade to Nagios version 3.0.6 or later.
3
What versions are affected by CVE-2008-6373?
CVE-2008-6373 affects Nagios versions prior to 3.0.6 and several specific earlier versions.
4
What is the impact of CVE-2008-6373?
The impact of CVE-2008-6373 includes potential remote attacks related to CGI programs and command submissions.
5
Are there any workarounds for CVE-2008-6373?
Temporary workarounds for CVE-2008-6373 are not well-documented, thus upgrading is recommended.